Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: cf7lCE4gQbwFpK5EDIZX1nwf5/T9QKtxAqSdMwfsWcU=
Subject key identifier: 60:CD:81:5D:A6:66:A0:8A:17:C2:09:47:A2:28:F4:F7:FE:DD:90:3B
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019E30A8FA1A374166C7F751A7B0B7367286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 191C
Signing time: Sat 16 May 2026 12:00:40 +0000
Manifest this update: Sat 16 May 2026 12:00:40 +0000
Manifest next update: Sun 17 May 2026 12:00:40 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: H5oSCUDWdOf8NIHvhUdqmmayRcEwAu1Adfbv9Qh5A1g=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a8:fa:1a:37:41:66:c7:f7:51:a7:b0:b7:36:72:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: May 16 12:00:40 2026 GMT
Not After : May 17 12:00:40 2026 GMT
Subject: CN=60cd815da666a08a17c20947a228f4f7fedd903b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:8e:a8:70:89:76:0e:db:2d:0d:a2:0c:1d:
68:f9:36:9c:b8:5f:18:30:9d:82:79:78:ac:da:76:
0e:ea:54:c3:dc:75:3d:1f:bc:8a:3d:e8:84:70:9b:
11:77:d4:ce:fa:a6:60:ab:7d:2b:a7:e7:9f:1d:d0:
8d:78:7b:5b:31:58:97:69:4f:59:55:88:80:95:dd:
e3:1c:65:a6:1d:84:38:93:dd:44:41:e6:6c:0e:15:
3c:d4:dd:31:8c:6b:87:8c:09:56:8f:2b:1e:3b:a0:
f2:4f:e4:44:89:7d:14:0e:13:b5:60:35:5a:af:fc:
a2:f2:15:b1:da:e0:ad:a7:1b:f1:1a:23:bd:1b:45:
34:9b:72:08:67:f0:c3:0c:ab:76:d1:c2:23:51:75:
38:61:dc:6c:d8:64:4d:41:e8:cc:bb:7e:ad:76:bd:
73:ef:23:99:7d:48:ff:6b:4c:2e:78:d8:a3:2d:ed:
fc:f2:b3:18:73:8d:03:ae:84:70:d5:f1:f7:8a:df:
17:88:0e:38:4c:60:ed:46:42:4c:a7:13:65:b1:7e:
88:7b:76:6e:1b:67:9f:c8:b2:aa:50:ac:9e:da:d6:
ea:84:61:a4:59:0e:36:24:a7:b0:81:2f:82:43:d0:
f2:5a:e3:24:35:13:2f:23:da:67:a4:42:31:8f:a7:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CD:81:5D:A6:66:A0:8A:17:C2:09:47:A2:28:F4:F7:FE:DD:90:3B
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fe:d6:dd:4e:64:31:45:b7:3b:b1:34:27:b2:f2:6f:89:12:
91:de:25:cf:cd:e2:70:fd:ef:f1:de:83:1d:fe:50:a2:78:51:
0d:f2:4f:af:c9:35:ad:fa:ba:12:24:a9:4d:d0:36:68:48:ce:
34:26:de:d6:9b:32:f1:1f:f9:af:9e:76:55:ad:2d:92:4b:42:
63:1d:fd:ae:bd:7f:e1:9d:d2:22:21:31:cd:a8:aa:4e:64:9d:
97:65:1a:0f:4e:a8:7b:7e:40:6b:68:7f:0f:60:91:53:fc:02:
f5:ee:d3:bb:f1:74:73:e1:b7:8d:ad:64:d2:9d:59:bc:d8:c3:
e2:77:d9:aa:6a:14:15:59:76:5b:41:b2:45:a4:09:a8:62:68:
7c:ed:0a:c3:30:8c:b2:b8:36:85:35:30:0b:ab:4e:79:29:3d:
04:98:4b:b3:b7:33:4a:f8:a3:dc:6a:37:94:73:f1:03:ea:2a:
93:9a:a9:a5:fe:eb:85:76:da:d2:84:03:55:55:4b:28:3c:3c:
db:fe:a8:87:8c:6c:33:29:1d:c7:f2:8d:af:4c:2a:56:78:25:
ed:78:d8:3e:6f:96:bc:7b:bb:0d:88:e2:85:5c:6b:b1:c8:33:
25:f6:b0:94:e5:d4:6a:9a:29:43:d0:ce:a6:9e:d0:45:3e:33:
3d:4e:59:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:28 2026 by rpki-client